SSCP Systems Security Certified Practitioner All-in-One Exam Guide, Third Edition, 3rd Edition

CHAPTER 11

Security Operations

In this chapter, you will learn about

•  Data classifications such as Confidential, Sensitive, Private, and Public

•  The importance of marking and labeling data with its classification

•  The difference between data at rest and data in motion

•  Different elements of data management policies

•  Components of a database such as tuples, rows, primary keys, and foreign keys

•  Risks related to data inference and data diddling

•  Regulatory requirements related to PII and PHI

•  Asset management components

•  The differences between certification and accreditation

•  The Common Criteria and its evaluation levels

•  Using a risk management framework with a certification and accreditation process

•  Different phases ...